This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft File: M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft (raw, json) Hash identifier: 0z9SRU19S+tVyYZ3gGZSY5cF6t6EwKU+DhBRUCxh3vA= Subject key identifier: 66:8B:21:67:AF:CD:FF:B9:66:76:F3:BC:E9:E9:E3:9F:8D:E6:60:95 Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52 Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452 Certificate serial: 019C4133AA4968A25FBEB7C6A0E4A76A20F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft Manifest number: 0527 Signing time: Mon 09 Feb 2026 07:00:30 +0000 Manifest this update: Mon 09 Feb 2026 07:00:30 +0000 Manifest next update: Tue 10 Feb 2026 07:00:30 +0000 Files and hashes: 1: M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl (hash: NpT5tPK1j0iIEGvD7JtsbFYsIIUQUuLOUAE7H5wyPLM=) 2: mPlMjkqTZkC57IBLKPd0EfNj7iw.roa (hash: VIIonFkOVhOCVYivwNgIVRIKhtGM74oWX8Z6MBeWXm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:aa:49:68:a2:5f:be:b7:c6:a0:e4:a7:6a:20:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452 Validity Not Before: Feb 9 07:00:30 2026 GMT Not After : Feb 10 07:00:30 2026 GMT Subject: CN=668b2167afcdffb96676f3bce9e9e39f8de66095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:59:bf:e8:e9:49:ab:05:98:45:23:b0:08: d5:d7:1a:18:19:95:fe:f7:db:44:98:c1:3a:74:9f: 76:10:45:b4:ed:f2:3e:50:b6:6a:3a:2e:bf:f5:cc: 12:8f:fc:7b:53:e4:1c:e9:48:a8:e9:0e:a8:b4:00: fb:c2:f0:79:d3:4e:22:e6:0d:13:63:d2:a1:e7:d6: 20:84:93:dc:6b:eb:8b:ff:cd:90:63:89:01:65:87: 58:15:ea:34:53:d7:a9:c6:f3:77:88:35:f3:db:16: fd:a4:cc:40:29:03:ac:e1:02:81:44:a2:57:8b:11: 62:a7:c6:ef:3d:70:a0:1e:bd:35:e7:94:64:8c:fe: b0:6a:90:e1:72:bb:a3:fc:8a:47:94:56:9c:47:22: 4a:0e:d1:ea:ce:71:a8:41:68:73:d8:42:06:f9:75: f2:db:71:cc:7b:88:5a:8b:ef:42:13:b9:eb:07:62: 1b:36:9e:e2:cc:41:e7:6c:56:6c:36:12:fe:fa:cc: 90:01:a0:2a:90:bc:4a:dd:d8:8e:fe:b6:c0:db:26: 8b:68:8b:f2:87:fe:86:55:bc:35:88:98:7e:c0:93: 3c:de:e6:41:87:47:0f:73:01:a7:8c:35:33:6e:3f: fc:3b:8f:78:d7:6c:9f:f4:bd:a1:12:25:8e:5e:1b: c5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8B:21:67:AF:CD:FF:B9:66:76:F3:BC:E9:E9:E3:9F:8D:E6:60:95 X509v3 Authority Key Identifier: keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:63:14:f0:e1:e8:e0:ab:c2:27:df:c3:28:80:53:0a:9f:75: 76:f2:f5:d4:bd:db:c4:91:72:95:ff:b9:e3:87:1c:b0:85:06: 14:c3:b7:6f:e9:c5:1d:25:09:f5:e4:55:85:56:5c:e2:c2:8c: 1d:ef:3f:c6:09:12:8e:c3:6b:bc:c9:89:41:2f:1b:53:04:f7: 14:6b:4c:4c:be:7c:cb:b5:00:81:78:81:6c:dc:e1:48:92:2f: f4:8d:b5:80:d0:3b:d2:e9:9b:2c:b1:04:70:d7:80:8f:c8:12: 7f:99:ef:b3:49:19:cf:0a:ed:04:fa:46:0b:f5:c3:ae:e0:8a: 76:4f:8e:0a:20:e0:cc:d8:8a:7f:ab:78:01:0b:03:ab:a3:47: f8:50:00:3a:0b:9b:c0:6c:f5:33:08:c1:92:83:fd:33:1b:6e: 4d:24:d4:9b:0e:43:33:0a:b3:53:ad:0c:3b:bd:01:9f:25:c2: 27:41:dd:f8:5e:7d:bc:d7:81:e8:27:ab:b6:a8:de:be:28:fc: 0c:8e:83:63:a3:0a:0f:65:96:71:84:f2:46:11:25:8b:0d:df: c7:8c:b8:04:f1:65:e1:6e:b1:97:87:35:0d:2b:5e:d3:7f:54: 80:67:12:12:af:e9:0d:05:aa:6b:5c:5f:3c:d7:f1:dd:32:46: 88:46:58:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM6pJaKJfvrfGoOSnaiDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZWExOWI2NzBjYmQxYWY2MjA3MDRjNGUyYTMzMzA4YWIy MGU0NTIwHhcNMjYwMjA5MDcwMDMwWhcNMjYwMjEwMDcwMDMwWjAzMTEwLwYDVQQD Eyg2NjhiMjE2N2FmY2RmZmI5NjY3NmYzYmNlOWU5ZTM5ZjhkZTY2MDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDZZv+jpSasFmEUjsAjV1xoYGZX+ 99tEmME6dJ92EEW07fI+ULZqOi6/9cwSj/x7U+Qc6Uio6Q6otAD7wvB5004i5g0T Y9Kh59YghJPca+uL/82QY4kBZYdYFeo0U9epxvN3iDXz2xb9pMxAKQOs4QKBRKJX ixFip8bvPXCgHr0155RkjP6wapDhcruj/IpHlFacRyJKDtHqznGoQWhz2EIG+XXy 23HMe4hai+9CE7nrB2IbNp7izEHnbFZsNhL++syQAaAqkLxK3diO/rbA2yaLaIvy h/6GVbw1iJh+wJM83uZBh0cPcwGnjDUzbj/8O49412yf9L2hEiWOXhvFewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaLIWevzf+5ZnbzvOnp45+N5mCVMB8GA1UdIwQY MBaAFDPqGbZwy9GvYgcExOKjMwirIORSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEt OWVmMGU2NmMzYTZjLzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lMzQ1NzktMzg4MC00NjU3LWE0OWEtOWVmMGU2NmMzYTZj LzEvTS1vWnRuREwwYTlpQndURTRxTXpDS3NnNUZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWMU8OHo 4KvCJ9/DKIBTCp91dvL11L3bxJFylf+544ccsIUGFMO3b+nFHSUJ9eRVhVZc4sKM He8/xgkSjsNrvMmJQS8bUwT3FGtMTL58y7UAgXiBbNzhSJIv9I21gNA70umbLLEE cNeAj8gSf5nvs0kZzwrtBPpGC/XDruCKdk+OCiDgzNiKf6t4AQsDq6NH+FAAOgub wGz1MwjBkoP9MxtuTSTUmw5DMwqzU60MO70BnyXCJ0Hd+F59vNeB6Certqjevij8 DI6DY6MKD2WWcYTyRhEliw3fx4y4BPFl4W6xl4c1DSte039UgGcSEq/pDQWqa1xf PNfx3TJGiEZY5g== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:03 2026 by rpki-client